Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
File: 3qSlB60VhloLLuwJ67TnVFf0AYs.mft (raw, json)
Hash identifier: grfS+OhHX9zsvtBTZmfC8hEfb7rgL9YHh0XMtaV4CHQ=
Subject key identifier: EE:CC:F7:0B:E3:67:AA:C8:F6:42:82:95:F5:99:93:57:DF:9C:C6:8D
Authority key identifier: DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
Certificate issuer: /CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Certificate serial: 019F30DEDB74B96A97D649164E05480ADA08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
Manifest number: 03B9
Signing time: Sun 05 Jul 2026 06:02:19 +0000
Manifest this update: Sun 05 Jul 2026 06:02:19 +0000
Manifest next update: Mon 06 Jul 2026 06:02:19 +0000
Files and hashes: 1: 3qSlB60VhloLLuwJ67TnVFf0AYs.crl (hash: 7bwjdzRU12P5GCxj8nxYmAHCXyTCsQjrOItF+jK7aBU=)
2: UcfLZ7L91GVWjLGWEYmlJV2c10o.roa (hash: uVZ/PpG6ROCuILZTxmMA8qXeD47uyabcF2INsekoGNc=)
3: n_N9Ah4Rw1Wp9Z-3SVYIy6Y0wC4.roa (hash: 2wd1XBjZMp+nPiV7QP5P7/6ushDvOEw3Nbs3DojVSrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jul 2026 06:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:30:de:db:74:b9:6a:97:d6:49:16:4e:05:48:0a:da:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Validity
Not Before: Jul 5 06:02:19 2026 GMT
Not After : Jul 6 06:02:19 2026 GMT
Subject: CN=eeccf70be367aac8f6428295f5999357df9cc68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ed:5b:f7:53:90:95:17:97:86:cc:6b:cd:21:
e4:bc:74:bb:b7:3f:49:c8:d3:ed:aa:a6:2f:36:c1:
3e:6d:a9:34:c5:e1:42:0e:b3:aa:e4:95:92:d5:c0:
74:3a:af:3a:40:4e:cb:ab:f8:d8:57:0c:e0:cc:b4:
d9:6e:99:6c:2a:37:a8:90:3c:0b:3b:06:48:33:2c:
40:8a:f0:c5:a3:24:7d:e3:81:b8:95:fc:56:c1:d5:
3b:13:47:30:67:80:03:0e:35:dc:54:db:09:64:dc:
31:54:78:85:69:14:c2:ad:6e:a4:d9:7a:e0:26:31:
7c:f1:32:2c:46:aa:72:99:d2:9f:2f:a7:e9:69:02:
f8:58:95:db:e2:29:c8:9f:50:f7:09:c8:89:0d:ca:
a0:75:8a:f4:4e:d1:57:d1:1f:c5:9b:03:0a:f4:4f:
6e:68:b8:de:66:7f:cd:49:73:8a:5d:04:76:31:9c:
2b:3b:87:fa:b3:71:cb:94:66:63:cc:af:8b:72:cf:
9b:43:fc:f0:63:cc:41:00:e1:98:3f:3d:df:e6:dc:
57:13:54:d9:6c:d1:8e:32:d6:c8:8d:0d:49:ca:db:
79:ac:ea:dd:98:51:05:97:ad:2e:6c:f8:b1:2d:47:
bb:6d:76:64:58:08:bb:4b:5b:a5:26:41:ff:bb:a1:
97:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CC:F7:0B:E3:67:AA:C8:F6:42:82:95:F5:99:93:57:DF:9C:C6:8D
X509v3 Authority Key Identifier:
keyid:DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:0c:05:e4:85:89:60:18:bc:35:3c:6a:79:55:a9:72:04:88:
07:a4:72:9f:90:70:70:9c:c6:e4:4d:cf:e6:d5:9b:06:75:18:
be:dd:b9:42:b8:8c:22:0a:e8:38:36:a4:fd:ae:26:dc:17:1f:
e3:15:5c:9f:c6:f9:dc:87:63:23:95:a4:a9:ce:57:2f:49:61:
75:c1:8b:6c:72:69:49:7f:05:d1:34:a3:71:aa:ab:72:f5:fd:
30:3f:47:2a:f2:b2:65:50:4f:af:76:4b:43:ef:7b:ee:37:3e:
d8:20:09:b5:ca:60:36:32:d7:8f:1f:cd:0a:bf:0d:db:b2:33:
1b:62:38:40:bc:8a:23:1d:fd:08:43:c4:49:ac:d2:b6:f4:c3:
98:24:73:85:f7:c7:ed:41:d4:f5:c6:62:b9:52:69:36:2a:7b:
d1:2b:b2:25:bc:c4:30:f7:8b:84:fd:b3:66:44:5c:12:3f:e7:
d5:3f:2f:f9:e4:a7:6c:33:10:e4:b6:af:01:c6:4b:83:84:78:
c6:6e:35:3d:a4:14:47:9a:3e:0e:10:54:b9:24:bb:5d:79:45:
a5:b6:35:86:54:72:b0:57:e2:5f:12:5e:d7:01:0a:69:83:aa:
4f:c1:f4:65:ae:91:7e:f5:d0:29:0c:e9:38:89:2e:cf:b9:bf:
e9:87:3e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 11:18:36 2026 by rpki-client